CVE-2012-3530

2012-09-0500:00:00

ubuntu.com

0.003 Low

EPSS

Percentile

71.5%

JSON

Incomplete blacklist vulnerability in the t3lib_div::quoteJSvalue API
function in TYPO3 4.5.x before 4.5.19, 4.6.x before 4.6.12 and 4.7.x before
4.7.4 allows remote attackers to conduct cross-site scripting (XSS) attacks
via certain HTML5 JavaScript events.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=685011>

OSVersionArchitecturePackageVersionFilename
ubuntu11.04noarchtypo3-src< 4.3.9+dfsg1-1+squeeze5build0.11.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	11.04	noarch	typo3-src	< 4.3.9+dfsg1-1+squeeze5build0.11.04.1	UNKNOWN

References

typo3.org/support/teams-security-security-bulletins/security-bulletins-single-view/article/several-vulnerabilities-in-typo3-core/

launchpad.net/bugs/cve/CVE-2012-3530

nvd.nist.gov/vuln/detail/CVE-2012-3530

security-tracker.debian.org/tracker/CVE-2012-3530

www.cve.org/CVERecord?id=CVE-2012-3530

0.003 Low

EPSS

Percentile

71.5%

JSON

Related for UB:CVE-2012-3530